pennyrouter 0.2.7 → 0.2.9

package/src/launch.js

@@ -1,393 +1,487 @@
-import { spawn } from "node:child_process";
-import {
-  chmod,
-  cp,
-  mkdir,
-  rm,
-  stat,
-  unlink,
-  writeFile,
-} from "node:fs/promises";
-import { constants as osConstants } from "node:os";
-import { fileURLToPath } from "node:url";
-import { basename, dirname, join, resolve } from "node:path";
-
-import { configureClaudeCodeStatusline } from "./statusline.js";
-import { atomicWrite, homeDir, readJsonFile, readText } from "./state.js";
-
-const CONFIG_VERSION = 1;
-const PATH_START = "# >>> pennyrouter PATH >>>";
-const PATH_END = "# <<< pennyrouter PATH <<<";
-const CODEX_PROFILE_MARKER = "# PennyRouter per-command profile (managed; no secrets)";
-const CLAUDE_COMMAND_MARKER = "<!-- PennyRouter managed Claude command -->";
-
-export function pennyConfigDir() {
-  return join(process.env.XDG_CONFIG_HOME || join(homeDir(), ".config"), "pennyrouter");
-}
-
-export function pennyConfigPath() {
-  return join(pennyConfigDir(), "config.json");
-}
-
-export function pennyDataDir() {
-  return join(process.env.XDG_DATA_HOME || join(homeDir(), ".local", "share"), "pennyrouter");
-}
-
-export function pennyRuntimeDir() {
-  return join(pennyDataDir(), "runtime");
-}
-
-export function pennyBinDir() {
-  return join(homeDir(), ".local", "bin");
-}
-
-export function pennyShimPath() {
-  return join(pennyBinDir(), "penny");
-}
-
-export function claudeLaunchSettingsPath() {
-  return join(pennyConfigDir(), "claude-settings.json");
-}
-
-export function codexLaunchProfilePath() {
-  const codexHome = process.env.CODEX_HOME || join(homeDir(), ".codex");
-  return join(codexHome, "pennyrouter.config.toml");
-}
-
-export function claudeUserSkillPath() {
-  return join(homeDir(), ".claude", "skills", "penny", "SKILL.md");
-}
-
-function legacyClaudeUserCommandPath() {
-  return join(homeDir(), ".claude", "commands", "penny.md");
-}
-
-async function privateWrite(path, text) {
-  await mkdir(dirname(path), { recursive: true, mode: 0o700 });
-  await atomicWrite(path, text);
-  await chmod(path, 0o600);
-}
-
-export async function loadPennyConfig() {
-  return (await readJsonFile(pennyConfigPath(), null)) || {
-    version: CONFIG_VERSION,
-    harnesses: {},
-  };
-}
-
-export async function savePennyConfig(config) {
-  const next = { version: CONFIG_VERSION, ...config };
-  await privateWrite(pennyConfigPath(), `${JSON.stringify(next, null, 2)}\n`);
-  return next;
-}
-
-function packageRoot() {
-  return resolve(dirname(fileURLToPath(import.meta.url)), "..");
-}
-
-async function copyRuntime() {
-  const source = packageRoot();
-  const destination = pennyRuntimeDir();
-  await mkdir(destination, { recursive: true, mode: 0o700 });
-  for (const entry of ["bin", "src"]) {
-    // Runtime upgrades must not merge with the previous package. In particular,
-    // 0.2.1 moved /penny from a skill to a command; leaving the old skill behind
-    // makes Claude discover two incompatible definitions.
-    await rm(join(destination, entry), { recursive: true, force: true });
-    await cp(join(source, entry), join(destination, entry), {
-      recursive: true,
-      force: true,
-    });
-  }
-  // Remove plugin assets used by 0.2.0/0.2.1. /penny is now a managed personal
-  // command so it can use the exact unnamespaced name in every Claude session.
-  await rm(join(destination, "claude-plugin"), { recursive: true, force: true });
-  await cp(join(source, "package.json"), join(destination, "package.json"), { force: true });
-}
-
-async function writeShim() {
-  await mkdir(pennyBinDir(), { recursive: true, mode: 0o755 });
-  const entry = join(pennyRuntimeDir(), "bin", "penny.js").replaceAll('"', '\\"');
-  await writeFile(pennyShimPath(), `#!/bin/sh\nexec node "${entry}" "$@"\n`, {
-    encoding: "utf8",
-    mode: 0o755,
-  });
-  await chmod(pennyShimPath(), 0o755);
-}
-
-function pathContains(dir) {
-  return String(process.env.PATH || "").split(":").some((candidate) => resolve(candidate) === resolve(dir));
-}
-
-function shellRcPath() {
-  const shell = basename(process.env.SHELL || "");
-  if (shell === "zsh") return join(homeDir(), ".zshrc");
-  if (shell === "bash") return join(homeDir(), ".bashrc");
-  return null;
-}
-
-export async function ensurePennyOnPath({ updatePath = true } = {}) {
-  if (pathContains(pennyBinDir())) return { available: true, changed: false, rc_path: null };
-  if (!updatePath) return { available: false, changed: false, rc_path: null };
-  const rcPath = shellRcPath();
-  if (!rcPath) return { available: false, changed: false, rc_path: null };
-  const current = await readText(rcPath, "");
-  if (!current.includes(PATH_START)) {
-    const block = `${PATH_START}\nexport PATH="$HOME/.local/bin:$PATH"\n${PATH_END}`;
-    const prefix = current && !current.endsWith("\n") ? "\n" : "";
-    await atomicWrite(rcPath, `${current}${prefix}${block}\n`);
-  }
-  return { available: true, changed: !current.includes(PATH_START), rc_path: rcPath };
-}
-
-export async function installPennyRuntime({ updatePath = true } = {}) {
-  if (!(["darwin", "linux"].includes(process.platform))) {
-    return { supported: false, available: false, changed: false, rc_path: null };
-  }
-  await copyRuntime();
-  await writeShim();
-  const path = await ensurePennyOnPath({ updatePath });
-  const config = await loadPennyConfig();
-  if (path.rc_path) {
-    config.path_rc = path.rc_path;
-    await savePennyConfig(config);
-  }
-  return { supported: true, ...path, shim_path: pennyShimPath() };
-}
-
-export function renderCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }) {
-  const authLines = subscriptionAuth
-    ? [
-        "requires_openai_auth = true",
-        'env_http_headers = { "x-pennyrouter-key" = "PENNYROUTER_API_KEY" }',
-      ]
-    : ['env_key = "PENNYROUTER_API_KEY"'];
-  return [
-    CODEX_PROFILE_MARKER,
-    'model_provider = "pennyrouter"',
-    "",
-    "[model_providers.pennyrouter]",
-    'name = "PennyRouter"',
-    `base_url = ${JSON.stringify(`${String(gatewayBaseUrl).replace(/\/+$/, "")}/v1`)}`,
-    'wire_api = "responses"',
-    "supports_websockets = false",
-    ...authLines,
-    "",
-  ].join("\n");
-}
-
-async function writeClaudeLaunchSettings() {
-  const native = (await readJsonFile(join(homeDir(), ".claude", "settings.json"), null)) || {};
-  const overlay = { disableClaudeAiConnectors: true };
-  if (native.statusLine) overlay.statusLine = native.statusLine;
-  await configureClaudeCodeStatusline(overlay);
-  await privateWrite(claudeLaunchSettingsPath(), `${JSON.stringify(overlay, null, 2)}\n`);
-}
-
-async function writeClaudeUserSkill() {
-  const path = claudeUserSkillPath();
-  const existing = await readText(path, "");
-  if (existing.trim() && !existing.includes(CLAUDE_COMMAND_MARKER)) {
-    throw new Error(
-      `${path} already exists and is not managed by PennyRouter. Rename it before installing.`,
-    );
-  }
-  await mkdir(dirname(path), { recursive: true });
-  await atomicWrite(path, [
-    "---",
-    "name: penny",
-    "description: PennyRouter commands and help.",
-    "argument-hint: <command and arguments>",
-    "disable-model-invocation: true",
-    "---",
-    CLAUDE_COMMAND_MARKER,
-    "",
-    "@penny $ARGUMENTS",
-    "",
-  ].join("\n"));
-  const legacyPath = legacyClaudeUserCommandPath();
-  const legacy = await readText(legacyPath, "");
-  if (legacy.includes(CLAUDE_COMMAND_MARKER)) {
-    await unlink(legacyPath).catch((error) => {
-      if (error.code !== "ENOENT") throw error;
-    });
-  }
-}
-
-async function writeCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }) {
-  const path = codexLaunchProfilePath();
-  const existing = await readText(path, "");
-  if (existing.trim() && !existing.startsWith(CODEX_PROFILE_MARKER)) {
-    throw new Error(
-      `${path} already exists and is not managed by PennyRouter. Rename it before installing.`,
-    );
-  }
-  await privateWrite(path, renderCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }));
-}
-
-export async function configurePennyHarness(harness, {
-  apiKey,
-  gatewayBaseUrl,
-  subscriptionAuth = false,
-  models = null,
-}) {
-  const config = await loadPennyConfig();
-  config.gateway_base_url = gatewayBaseUrl;
-  config.api_key = apiKey;
-  config.harnesses ||= {};
-  if (harness === "claude-code") {
-    await writeClaudeUserSkill();
-    await writeClaudeLaunchSettings();
-    config.harnesses.claude = {
-      enabled: true,
-      subscription_auth: Boolean(subscriptionAuth),
-      models: models || {},
-    };
-  } else if (harness === "codex") {
-    await writeCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth });
-    config.harnesses.codex = {
-      enabled: true,
-      subscription_auth: Boolean(subscriptionAuth),
-    };
-  } else {
-    throw new Error(`The penny command does not support ${harness}.`);
-  }
-  await savePennyConfig(config);
-}
-
-export async function setPennyHarnessEnabled(harness, enabled) {
-  const config = await loadPennyConfig();
-  const key = harness === "claude-code" ? "claude" : harness;
-  if (config.harnesses?.[key]) {
-    config.harnesses[key].enabled = Boolean(enabled);
-    await savePennyConfig(config);
-  }
-}
-
-export async function removePennyHarness(harness) {
-  const config = await loadPennyConfig();
-  const key = harness === "claude-code" ? "claude" : harness;
-  if (harness === "claude-code") {
-    await unlink(claudeLaunchSettingsPath()).catch((error) => {
-      if (error.code !== "ENOENT") throw error;
-    });
-    for (const path of [claudeUserSkillPath(), legacyClaudeUserCommandPath()]) {
-      const command = await readText(path, "");
-      if (!command.includes(CLAUDE_COMMAND_MARKER)) continue;
-      await unlink(path).catch((error) => {
-        if (error.code !== "ENOENT") throw error;
-      });
-    }
-  } else if (harness === "codex") {
-    const existing = await readText(codexLaunchProfilePath(), "");
-    if (existing.startsWith(CODEX_PROFILE_MARKER)) {
-      await unlink(codexLaunchProfilePath()).catch((error) => {
-        if (error.code !== "ENOENT") throw error;
-      });
-    }
-  }
-  if (config.harnesses) delete config.harnesses[key];
-  await savePennyConfig(config);
-}
-
-export async function hasConfiguredPennyHarnesses() {
-  const config = await loadPennyConfig();
-  return Object.keys(config.harnesses || {}).length > 0;
-}
-
-async function removeManagedPathBlock(rcPath) {
-  if (!rcPath) return;
-  const current = await readText(rcPath, "");
-  if (!current.includes(PATH_START)) return;
-  const escapedStart = PATH_START.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const escapedEnd = PATH_END.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-  const next = current
-    .replace(new RegExp(`(?:^|\\n)${escapedStart}\\n[\\s\\S]*?\\n${escapedEnd}\\n?`, "m"), "\n")
-    .replace(/^\n+/, "");
-  await atomicWrite(rcPath, next);
-}
-
-export async function removePennyRuntime() {
-  const config = await loadPennyConfig();
-  await removeManagedPathBlock(config.path_rc);
-  await unlink(pennyShimPath()).catch((error) => {
-    if (error.code !== "ENOENT") throw error;
-  });
-  await rm(pennyRuntimeDir(), { recursive: true, force: true });
-  await unlink(pennyConfigPath()).catch((error) => {
-    if (error.code !== "ENOENT") throw error;
-  });
-}
-
-function assertNoConflictingArgs(harness, args) {
-  if (harness === "claude" && args.some((arg) => arg === "--settings" || arg.startsWith("--settings="))) {
-    throw new Error("penny claude manages --settings; remove that flag or run native claude.");
-  }
-  if (harness === "codex" && args.some((arg) => arg === "--profile" || arg === "-p" || arg.startsWith("--profile="))) {
-    throw new Error("penny codex manages --profile; remove that flag or run native codex.");
-  }
-}
-
-export function buildPennyInvocation(harness, args, config) {
-  const item = config.harnesses?.[harness];
-  if (!item || !item.enabled) {
-    throw new Error(`PennyRouter is not enabled for ${harness}. Run npx pennyrouter install.`);
-  }
-  assertNoConflictingArgs(harness, args);
-  const env = { ...process.env, PENNYROUTER_API_KEY: config.api_key };
-  if (harness === "claude") {
-    const models = item.models || {};
-    env.ANTHROPIC_BASE_URL = config.gateway_base_url;
-    env.ANTHROPIC_AUTH_TOKEN = config.api_key;
-    delete env.ANTHROPIC_API_KEY;
-    if (models.haiku) env.ANTHROPIC_DEFAULT_HAIKU_MODEL = models.haiku;
-    if (models.sonnet) env.ANTHROPIC_DEFAULT_SONNET_MODEL = models.sonnet;
-    if (models.opus) env.ANTHROPIC_DEFAULT_OPUS_MODEL = models.opus;
-    if (models.fable) env.ANTHROPIC_DEFAULT_FABLE_MODEL = models.fable;
-    // The pinned labels above aren't real Anthropic model ids, so CC can't infer their
-    // context window from the name and falls back to a conservative 200K default. Tell it
-    // directly: every pinned slot is a Claude model with the 1M-context beta enabled upstream.
-    env.CLAUDE_CODE_MAX_CONTEXT_TOKENS = "1000000";
-    return {
-      command: "claude",
-      args: ["--settings", claudeLaunchSettingsPath(), ...args],
-      env,
-    };
-  }
-  if (harness === "codex") {
-    return { command: "codex", args: ["--profile", "pennyrouter", ...args], env };
-  }
-  throw new Error(`Unknown Penny harness "${harness}". Try penny claude or penny codex.`);
-}
-
-async function waitForChild(child) {
-  return new Promise((resolvePromise, reject) => {
-    child.once("error", reject);
-    child.once("exit", (code, signal) => resolvePromise({ code, signal }));
-  });
-}
-
-export async function runPenny(argv = process.argv.slice(2)) {
-  const harness = argv[0];
-  if (!harness || harness === "help" || harness === "--help" || harness === "-h") {
-    console.log("Usage: penny <claude|codex> [native arguments...]");
-    return 0;
-  }
-  if (!(["claude", "codex"].includes(harness))) {
-    throw new Error(`Unknown harness "${harness}". Try penny claude or penny codex.`);
-  }
-  const config = await loadPennyConfig();
-  const invocation = buildPennyInvocation(harness, argv.slice(1), config);
-  const child = spawn(invocation.command, invocation.args, {
-    cwd: process.cwd(),
-    env: invocation.env,
-    stdio: "inherit",
-  });
-  const result = await waitForChild(child);
-  if (result.signal) return 128 + (osConstants.signals[result.signal] || 0);
-  return result.code ?? 1;
-}
-
-export async function fileMode(path) {
-  return (await stat(path)).mode & 0o777;
-}
+import { spawn, spawnSync } from "node:child_process";
+import {
+  chmod,
+  cp,
+  mkdir,
+  rm,
+  stat,
+  unlink,
+  writeFile,
+} from "node:fs/promises";
+import { constants as osConstants } from "node:os";
+import { fileURLToPath } from "node:url";
+import { basename, dirname, join, resolve } from "node:path";
+
+import { configureClaudeCodeStatusline } from "./statusline.js";
+import { atomicWrite, homeDir, readJsonFile, readText } from "./state.js";
+
+const CONFIG_VERSION = 1;
+const PATH_START = "# >>> pennyrouter PATH >>>";
+const PATH_END = "# <<< pennyrouter PATH <<<";
+const CODEX_PROFILE_MARKER = "# PennyRouter per-command profile (managed; no secrets)";
+const CLAUDE_COMMAND_MARKER = "<!-- PennyRouter managed Claude command -->";
+
+export function pennyConfigDir() {
+  if (process.platform === "win32") {
+    return join(process.env.APPDATA || process.env.LOCALAPPDATA || homeDir(), "PennyRouter");
+  }
+  return join(process.env.XDG_CONFIG_HOME || join(homeDir(), ".config"), "pennyrouter");
+}
+
+export function pennyConfigPath() {
+  return join(pennyConfigDir(), "config.json");
+}
+
+export function pennyDataDir() {
+  if (process.platform === "win32") {
+    return join(process.env.LOCALAPPDATA || process.env.APPDATA || homeDir(), "PennyRouter");
+  }
+  return join(process.env.XDG_DATA_HOME || join(homeDir(), ".local", "share"), "pennyrouter");
+}
+
+export function pennyRuntimeDir() {
+  return join(pennyDataDir(), "runtime");
+}
+
+export function pennyBinDir() {
+  if (process.platform === "win32") return join(pennyDataDir(), "bin");
+  return join(homeDir(), ".local", "bin");
+}
+
+export function pennyShimPath() {
+  return join(pennyBinDir(), process.platform === "win32" ? "penny.cmd" : "penny");
+}
+
+export function claudeLaunchSettingsPath() {
+  return join(pennyConfigDir(), "claude-settings.json");
+}
+
+export function codexLaunchProfilePath() {
+  const codexHome = process.env.CODEX_HOME || join(homeDir(), ".codex");
+  return join(codexHome, "pennyrouter.config.toml");
+}
+
+export function claudeUserSkillPath() {
+  return join(homeDir(), ".claude", "skills", "penny", "SKILL.md");
+}
+
+function legacyClaudeUserCommandPath() {
+  return join(homeDir(), ".claude", "commands", "penny.md");
+}
+
+async function privateWrite(path, text) {
+  await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+  await atomicWrite(path, text);
+  await chmod(path, 0o600);
+}
+
+export async function loadPennyConfig() {
+  return (await readJsonFile(pennyConfigPath(), null)) || {
+    version: CONFIG_VERSION,
+    harnesses: {},
+  };
+}
+
+export async function savePennyConfig(config) {
+  const next = { version: CONFIG_VERSION, ...config };
+  await privateWrite(pennyConfigPath(), `${JSON.stringify(next, null, 2)}\n`);
+  return next;
+}
+
+function packageRoot() {
+  return resolve(dirname(fileURLToPath(import.meta.url)), "..");
+}
+
+async function copyRuntime() {
+  const source = packageRoot();
+  const destination = pennyRuntimeDir();
+  await mkdir(destination, { recursive: true, mode: 0o700 });
+  for (const entry of ["bin", "src"]) {
+    // Runtime upgrades must not merge with the previous package. In particular,
+    // 0.2.1 moved /penny from a skill to a command; leaving the old skill behind
+    // makes Claude discover two incompatible definitions.
+    await rm(join(destination, entry), { recursive: true, force: true });
+    await cp(join(source, entry), join(destination, entry), {
+      recursive: true,
+      force: true,
+    });
+  }
+  // Remove plugin assets used by 0.2.0/0.2.1. /penny is now a managed personal
+  // command so it can use the exact unnamespaced name in every Claude session.
+  await rm(join(destination, "claude-plugin"), { recursive: true, force: true });
+  await cp(join(source, "package.json"), join(destination, "package.json"), { force: true });
+}
+
+async function writeShim() {
+  await mkdir(pennyBinDir(), { recursive: true, mode: 0o755 });
+  const entry = join(pennyRuntimeDir(), "bin", "penny.js");
+  const body = process.platform === "win32"
+    // `node` and the native harnesses are normally npm .cmd shims on Windows. cmd.exe
+    // resolves those through PATHEXT, while Node's direct spawn does not.
+    ? `@echo off\r\nnode "${entry.replaceAll('"', '""')}" %*\r\n`
+    : `#!/bin/sh\nexec node "${entry.replaceAll('"', '\\"')}" "$@"\n`;
+  await writeFile(pennyShimPath(), body, {
+    encoding: "utf8",
+    mode: 0o755,
+  });
+  if (process.platform !== "win32") await chmod(pennyShimPath(), 0o755);
+}
+
+function pathContains(dir) {
+  const delimiter = process.platform === "win32" ? ";" : ":";
+  const normalized = process.platform === "win32" ? String(dir).toLowerCase() : resolve(dir);
+  return String(process.env.PATH || "").split(delimiter).some((candidate) => {
+    const value = candidate.trim().replace(/^"|"$/g, "");
+    return process.platform === "win32"
+      ? value.toLowerCase() === normalized
+      : resolve(value) === normalized;
+  });
+}
+
+function readWindowsUserPath() {
+  const result = spawnSync("reg", ["query", "HKCU\\Environment", "/v", "Path"], {
+    encoding: "utf8", windowsHide: true,
+  });
+  if (result.status !== 0) return "";
+  const line = String(result.stdout || "").split(/\r?\n/).find((item) => /\bPath\s+REG_/i.test(item));
+  return line ? line.replace(/^\s*Path\s+REG_\S+\s*/i, "").trim() : "";
+}
+
+function writeWindowsUserPath(value) {
+  const result = spawnSync("reg", [
+    "add", "HKCU\\Environment", "/v", "Path", "/t", "REG_EXPAND_SZ", "/d", value, "/f",
+  ], { stdio: "ignore", windowsHide: true });
+  if (result.status !== 0) throw new Error("Could not add PennyRouter to the Windows user PATH.");
+  broadcastEnvironmentChange();
+}
+
+// user32.dll,UpdatePerUserSystemParameters refreshes desktop/profile parameters (wallpaper,
+// etc.) — it is NOT the env var broadcast and does nothing for PATH. The actual mechanism
+// (what setx.exe and the System Properties dialog use) is a WM_SETTINGCHANGE broadcast with
+// lParam "Environment", which only Win32 SendMessageTimeout can send. Shell out to a tiny
+// inline PowerShell snippet to make that call. New processes started by an already-running
+// shell host (Explorer, Windows Terminal) still won't see the change until that host itself
+// receives and acts on the broadcast, but this is what makes a freshly-opened terminal work.
+function broadcastEnvironmentChange() {
+  const script = [
+    "$sig = '[DllImport(\"user32.dll\", SetLastError = true, CharSet = CharSet.Auto)]",
+    "public static extern IntPtr SendMessageTimeout(IntPtr hWnd, uint Msg, UIntPtr wParam,",
+    "string lParam, uint fuFlags, uint uTimeout, out UIntPtr lpdwResult);'",
+    "$type = Add-Type -MemberDefinition $sig -Name NativeMethods -Namespace Win32 -PassThru",
+    "$result = [UIntPtr]::Zero",
+    "$HWND_BROADCAST = [IntPtr]0xffff",
+    "$WM_SETTINGCHANGE = 0x1a",
+    "$SMTO_ABORTIFHUNG = 0x2",
+    "$type::SendMessageTimeout($HWND_BROADCAST, $WM_SETTINGCHANGE, [UIntPtr]::Zero, 'Environment', $SMTO_ABORTIFHUNG, 5000, [ref]$result) | Out-Null",
+  ].join("\n");
+  spawnSync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script], {
+    stdio: "ignore", windowsHide: true,
+  });
+}
+
+function windowsPathContains(pathValue, dir) {
+  const wanted = String(dir).toLowerCase();
+  return String(pathValue || "").split(";").some((item) => item.trim().replace(/^"|"$/g, "").toLowerCase() === wanted);
+}
+
+async function ensurePennyOnWindowsPath({ updatePath }) {
+  if (pathContains(pennyBinDir())) return { available: true, changed: false, path_managed: false };
+  const current = readWindowsUserPath();
+  if (windowsPathContains(current, pennyBinDir())) return { available: true, changed: false, path_managed: false };
+  if (!updatePath) return { available: false, changed: false, path_managed: false };
+  const next = current ? `${current};${pennyBinDir()}` : pennyBinDir();
+  writeWindowsUserPath(next);
+  return { available: true, changed: true, path_managed: true };
+}
+
+function shellRcPath() {
+  const shell = basename(process.env.SHELL || "");
+  if (shell === "zsh") return join(homeDir(), ".zshrc");
+  if (shell === "bash") return join(homeDir(), ".bashrc");
+  return null;
+}
+
+export async function ensurePennyOnPath({ updatePath = true } = {}) {
+  if (process.platform === "win32") return ensurePennyOnWindowsPath({ updatePath });
+  if (pathContains(pennyBinDir())) return { available: true, changed: false, rc_path: null };
+  if (!updatePath) return { available: false, changed: false, rc_path: null };
+  const rcPath = shellRcPath();
+  if (!rcPath) return { available: false, changed: false, rc_path: null };
+  const current = await readText(rcPath, "");
+  if (!current.includes(PATH_START)) {
+    const block = `${PATH_START}\nexport PATH="$HOME/.local/bin:$PATH"\n${PATH_END}`;
+    const prefix = current && !current.endsWith("\n") ? "\n" : "";
+    await atomicWrite(rcPath, `${current}${prefix}${block}\n`);
+  }
+  return { available: true, changed: !current.includes(PATH_START), rc_path: rcPath };
+}
+
+export async function installPennyRuntime({ updatePath = true } = {}) {
+  if (!(["darwin", "linux", "win32"].includes(process.platform))) {
+    return { supported: false, available: false, changed: false, rc_path: null };
+  }
+  await copyRuntime();
+  await writeShim();
+  const path = await ensurePennyOnPath({ updatePath });
+  const config = await loadPennyConfig();
+  if (path.rc_path) {
+    config.path_rc = path.rc_path;
+    await savePennyConfig(config);
+  }
+  if (process.platform === "win32" && path.path_managed) {
+    config.windows_path_managed = true;
+    await savePennyConfig(config);
+  }
+  return { supported: true, ...path, shim_path: pennyShimPath() };
+}
+
+export function renderCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }) {
+  const authLines = subscriptionAuth
+    ? [
+        "requires_openai_auth = true",
+        'env_http_headers = { "x-pennyrouter-key" = "PENNYROUTER_API_KEY" }',
+      ]
+    : ['env_key = "PENNYROUTER_API_KEY"'];
+  return [
+    CODEX_PROFILE_MARKER,
+    'model_provider = "pennyrouter"',
+    "",
+    "[model_providers.pennyrouter]",
+    'name = "PennyRouter"',
+    `base_url = ${JSON.stringify(`${String(gatewayBaseUrl).replace(/\/+$/, "")}/v1`)}`,
+    'wire_api = "responses"',
+    "supports_websockets = false",
+    ...authLines,
+    "",
+  ].join("\n");
+}
+
+async function writeClaudeLaunchSettings() {
+  const native = (await readJsonFile(join(homeDir(), ".claude", "settings.json"), null)) || {};
+  const overlay = { disableClaudeAiConnectors: true };
+  if (native.statusLine) overlay.statusLine = native.statusLine;
+  await configureClaudeCodeStatusline(overlay);
+  await privateWrite(claudeLaunchSettingsPath(), `${JSON.stringify(overlay, null, 2)}\n`);
+}
+
+async function writeClaudeUserSkill() {
+  const path = claudeUserSkillPath();
+  const existing = await readText(path, "");
+  if (existing.trim() && !existing.includes(CLAUDE_COMMAND_MARKER)) {
+    throw new Error(
+      `${path} already exists and is not managed by PennyRouter. Rename it before installing.`,
+    );
+  }
+  await mkdir(dirname(path), { recursive: true });
+  await atomicWrite(path, [
+    "---",
+    "name: penny",
+    "description: PennyRouter commands and help.",
+    "argument-hint: <command and arguments>",
+    "disable-model-invocation: true",
+    "---",
+    CLAUDE_COMMAND_MARKER,
+    "",
+    "@penny $ARGUMENTS",
+    "",
+  ].join("\n"));
+  const legacyPath = legacyClaudeUserCommandPath();
+  const legacy = await readText(legacyPath, "");
+  if (legacy.includes(CLAUDE_COMMAND_MARKER)) {
+    await unlink(legacyPath).catch((error) => {
+      if (error.code !== "ENOENT") throw error;
+    });
+  }
+}
+
+async function writeCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }) {
+  const path = codexLaunchProfilePath();
+  const existing = await readText(path, "");
+  if (existing.trim() && !existing.startsWith(CODEX_PROFILE_MARKER)) {
+    throw new Error(
+      `${path} already exists and is not managed by PennyRouter. Rename it before installing.`,
+    );
+  }
+  await privateWrite(path, renderCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth }));
+}
+
+export async function configurePennyHarness(harness, {
+  apiKey,
+  gatewayBaseUrl,
+  subscriptionAuth = false,
+  models = null,
+}) {
+  const config = await loadPennyConfig();
+  config.gateway_base_url = gatewayBaseUrl;
+  config.api_key = apiKey;
+  config.harnesses ||= {};
+  if (harness === "claude-code") {
+    await writeClaudeUserSkill();
+    await writeClaudeLaunchSettings();
+    config.harnesses.claude = {
+      enabled: true,
+      subscription_auth: Boolean(subscriptionAuth),
+      models: models || {},
+    };
+  } else if (harness === "codex") {
+    await writeCodexLaunchProfile({ gatewayBaseUrl, subscriptionAuth });
+    config.harnesses.codex = {
+      enabled: true,
+      subscription_auth: Boolean(subscriptionAuth),
+    };
+  } else {
+    throw new Error(`The penny command does not support ${harness}.`);
+  }
+  await savePennyConfig(config);
+}
+
+export async function setPennyHarnessEnabled(harness, enabled) {
+  const config = await loadPennyConfig();
+  const key = harness === "claude-code" ? "claude" : harness;
+  if (config.harnesses?.[key]) {
+    config.harnesses[key].enabled = Boolean(enabled);
+    await savePennyConfig(config);
+  }
+}
+
+export async function removePennyHarness(harness) {
+  const config = await loadPennyConfig();
+  const key = harness === "claude-code" ? "claude" : harness;
+  if (harness === "claude-code") {
+    await unlink(claudeLaunchSettingsPath()).catch((error) => {
+      if (error.code !== "ENOENT") throw error;
+    });
+    for (const path of [claudeUserSkillPath(), legacyClaudeUserCommandPath()]) {
+      const command = await readText(path, "");
+      if (!command.includes(CLAUDE_COMMAND_MARKER)) continue;
+      await unlink(path).catch((error) => {
+        if (error.code !== "ENOENT") throw error;
+      });
+    }
+  } else if (harness === "codex") {
+    const existing = await readText(codexLaunchProfilePath(), "");
+    if (existing.startsWith(CODEX_PROFILE_MARKER)) {
+      await unlink(codexLaunchProfilePath()).catch((error) => {
+        if (error.code !== "ENOENT") throw error;
+      });
+    }
+  }
+  if (config.harnesses) delete config.harnesses[key];
+  await savePennyConfig(config);
+}
+
+export async function hasConfiguredPennyHarnesses() {
+  const config = await loadPennyConfig();
+  return Object.keys(config.harnesses || {}).length > 0;
+}
+
+async function removeManagedPathBlock(rcPath) {
+  if (!rcPath) return;
+  const current = await readText(rcPath, "");
+  if (!current.includes(PATH_START)) return;
+  const escapedStart = PATH_START.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const escapedEnd = PATH_END.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const next = current
+    .replace(new RegExp(`(?:^|\\n)${escapedStart}\\n[\\s\\S]*?\\n${escapedEnd}\\n?`, "m"), "\n")
+    .replace(/^\n+/, "");
+  await atomicWrite(rcPath, next);
+}
+
+function removeWindowsPathEntry() {
+  const current = readWindowsUserPath();
+  if (!current) return;
+  const next = current.split(";")
+    .filter((item) => item.trim().replace(/^"|"$/g, "").toLowerCase() !== pennyBinDir().toLowerCase())
+    .join(";");
+  if (next !== current) writeWindowsUserPath(next);
+}
+
+export async function removePennyRuntime() {
+  const config = await loadPennyConfig();
+  if (process.platform === "win32") {
+    if (config.windows_path_managed) removeWindowsPathEntry();
+  } else {
+    await removeManagedPathBlock(config.path_rc);
+  }
+  await unlink(pennyShimPath()).catch((error) => {
+    if (error.code !== "ENOENT") throw error;
+  });
+  await rm(pennyRuntimeDir(), { recursive: true, force: true });
+  await unlink(pennyConfigPath()).catch((error) => {
+    if (error.code !== "ENOENT") throw error;
+  });
+}
+
+function assertNoConflictingArgs(harness, args) {
+  if (harness === "claude" && args.some((arg) => arg === "--settings" || arg.startsWith("--settings="))) {
+    throw new Error("penny claude manages --settings; remove that flag or run native claude.");
+  }
+  if (harness === "codex" && args.some((arg) => arg === "--profile" || arg === "-p" || arg.startsWith("--profile="))) {
+    throw new Error("penny codex manages --profile; remove that flag or run native codex.");
+  }
+}
+
+export function buildPennyInvocation(harness, args, config) {
+  const item = config.harnesses?.[harness];
+  if (!item || !item.enabled) {
+    throw new Error(`PennyRouter is not enabled for ${harness}. Run npx pennyrouter install.`);
+  }
+  assertNoConflictingArgs(harness, args);
+  const env = { ...process.env, PENNYROUTER_API_KEY: config.api_key };
+  if (harness === "claude") {
+    const models = item.models || {};
+    env.ANTHROPIC_BASE_URL = config.gateway_base_url;
+    env.ANTHROPIC_AUTH_TOKEN = config.api_key;
+    delete env.ANTHROPIC_API_KEY;
+    if (models.haiku) env.ANTHROPIC_DEFAULT_HAIKU_MODEL = models.haiku;
+    if (models.sonnet) env.ANTHROPIC_DEFAULT_SONNET_MODEL = models.sonnet;
+    if (models.opus) env.ANTHROPIC_DEFAULT_OPUS_MODEL = models.opus;
+    if (models.fable) env.ANTHROPIC_DEFAULT_FABLE_MODEL = models.fable;
+    // The pinned labels above aren't real Anthropic model ids, so CC can't infer their
+    // context window from the name and falls back to a conservative 200K default. Tell it
+    // directly: every pinned slot is a Claude model with the 1M-context beta enabled upstream.
+    env.CLAUDE_CODE_MAX_CONTEXT_TOKENS = "1000000";
+    return {
+      command: "claude",
+      args: ["--settings", claudeLaunchSettingsPath(), ...args],
+      env,
+    };
+  }
+  if (harness === "codex") {
+    return { command: "codex", args: ["--profile", "pennyrouter", ...args], env };
+  }
+  throw new Error(`Unknown Penny harness "${harness}". Try penny claude or penny codex.`);
+}
+
+async function waitForChild(child) {
+  return new Promise((resolvePromise, reject) => {
+    child.once("error", reject);
+    child.once("exit", (code, signal) => resolvePromise({ code, signal }));
+  });
+}
+
+export async function runPenny(argv = process.argv.slice(2)) {
+  const harness = argv[0];
+  if (!harness || harness === "help" || harness === "--help" || harness === "-h") {
+    console.log("Usage: penny <claude|codex> [native arguments...]");
+    return 0;
+  }
+  if (!(["claude", "codex"].includes(harness))) {
+    throw new Error(`Unknown harness "${harness}". Try penny claude or penny codex.`);
+  }
+  const config = await loadPennyConfig();
+  const invocation = buildPennyInvocation(harness, argv.slice(1), config);
+  const child = spawn(invocation.command, invocation.args, {
+    cwd: process.cwd(),
+    env: invocation.env,
+    stdio: "inherit",
+    shell: process.platform === "win32",
+  });
+  const result = await waitForChild(child);
+  if (result.signal) return 128 + (osConstants.signals[result.signal] || 0);
+  return result.code ?? 1;
+}
+
+export async function fileMode(path) {
+  return (await stat(path)).mode & 0o777;
+}